This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json) Hash identifier: vuwgpckG511nZrjBGtODq20leOp9Seh6ufd0qf2DrK8= Subject key identifier: AE:C6:66:96:62:F1:AE:BD:4D:08:4A:54:12:E9:2A:B7:42:4A:52:1E Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Certificate serial: 019AF277064375B90C5362F942F245D42809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft Manifest number: 087C Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: TrjtO9P/xPxIXYlHGWB9AisBNNj08IJc0vR9X0I8vM0=) 2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:06:43:75:b9:0c:53:62:f9:42:f2:45:d4:28:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=aec6669662f1aebd4d084a5412e92ab7424a521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:e1:27:c9:68:b8:7d:9e:25:19:4c:dd:0b: b6:64:41:7d:a0:c4:4a:6f:ef:eb:08:a9:b1:4a:09: d0:18:3d:89:04:4c:91:5d:b3:31:4a:02:78:7a:f0: f4:3e:06:c0:6e:50:bb:4d:f4:43:60:55:df:08:25: c4:0b:7f:e0:88:e3:19:59:4d:5d:94:40:15:e1:b7: 99:a6:2b:91:22:74:d8:af:a1:56:a2:72:db:66:79: 30:24:57:b4:68:a1:95:df:ab:b2:ef:70:dc:ea:fa: e6:82:a8:e7:04:9b:bb:b2:84:ae:0b:bd:e8:0d:00: a9:65:bd:23:18:cd:da:8e:ce:f4:1f:b1:92:e6:88: 25:aa:f0:ae:f2:54:b0:ac:32:3f:ce:5d:ba:57:0b: b6:5f:9f:9a:b9:b1:be:d9:1c:a5:79:ba:65:65:f0: 46:09:a8:64:25:37:9e:e2:94:19:22:2f:56:e0:62: 9a:70:b4:65:6a:28:9d:61:25:4e:22:2f:ba:31:2e: fe:da:b3:2c:90:8c:c8:4d:52:14:33:1e:b9:12:92: a2:94:cd:33:89:8a:a4:4d:53:21:0b:c2:81:fe:d6: d8:03:3c:86:a6:7b:0e:d8:5f:3c:bc:22:0a:35:be: d5:93:84:51:46:73:76:8a:98:2e:25:d3:a2:60:42: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:66:96:62:F1:AE:BD:4D:08:4A:54:12:E9:2A:B7:42:4A:52:1E X509v3 Authority Key Identifier: keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:79:c1:85:21:90:b4:31:b3:bc:2a:44:5d:be:3d:16:a4: cf:bd:68:d5:f9:7a:c9:b0:51:1c:cf:b3:0c:b5:01:42:9c:cc: b1:b9:cc:7d:78:82:b8:9d:85:1f:95:26:a9:e9:f4:99:8c:50: b6:3a:56:f5:21:dd:83:09:db:80:51:cb:58:e3:97:70:56:58: fb:30:e2:b2:f6:18:00:ab:04:e6:76:85:09:34:a1:49:2a:c2: 22:43:2f:76:71:7c:ed:e5:1a:0c:cf:39:12:0f:df:e1:ad:52: 68:ce:3d:76:0e:0d:87:ed:ab:d1:16:3e:df:53:89:da:da:94: 91:47:a4:25:d9:19:21:d3:32:6f:20:f6:85:bc:46:23:e8:54: 7d:5b:97:eb:c6:38:66:e6:99:fc:81:93:1e:c3:4f:cb:77:e2: 14:8e:11:00:b4:e6:10:65:43:08:0c:7c:d2:89:2d:14:b3:4c: 9f:fd:c5:ab:19:6b:8a:ec:04:ff:3a:6d:27:77:8a:cc:5d:6d: 2f:29:e0:90:eb:1d:61:20:3d:d6:9f:22:56:87:b7:10:7b:8b: 18:69:f8:da:ab:ea:81:e8:60:ae:8b:a6:5e:a0:07:89:4d:b6: b1:09:f1:34:02:6a:2f:55:73:7d:05:59:38:36:e1:55:0c:6c: ac:cd:8e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwZDdbkMU2L5QvJF1CgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw ZWQ5MWUwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EyhhZWM2NjY5NjYyZjFhZWJkNGQwODRhNTQxMmU5MmFiNzQyNGE1MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5unhJ8louH2eJRlM3Qu2ZEF9oMRK b+/rCKmxSgnQGD2JBEyRXbMxSgJ4evD0PgbAblC7TfRDYFXfCCXEC3/giOMZWU1d lEAV4beZpiuRInTYr6FWonLbZnkwJFe0aKGV36uy73Dc6vrmgqjnBJu7soSuC73o DQCpZb0jGM3ajs70H7GS5oglqvCu8lSwrDI/zl26Vwu2X5+aubG+2RylebplZfBG CahkJTee4pQZIi9W4GKacLRlaiidYSVOIi+6MS7+2rMskIzITVIUMx65EpKilM0z iYqkTVMhC8KB/tbYAzyGpnsO2F88vCIKNb7Vk4RRRnN2ipguJdOiYEKa/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7GZpZi8a69TQhKVBLpKrdCSlIeMB8GA1UdIwQY MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczB5wYUh kLQxs7wqRF2+PRakz71o1fl6ybBRHM+zDLUBQpzMsbnMfXiCuJ2FH5Umqen0mYxQ tjpW9SHdgwnbgFHLWOOXcFZY+zDisvYYAKsE5naFCTShSSrCIkMvdnF87eUaDM85 Eg/f4a1SaM49dg4Nh+2r0RY+31OJ2tqUkUekJdkZIdMybyD2hbxGI+hUfVuX68Y4 ZuaZ/IGTHsNPy3fiFI4RALTmEGVDCAx80oktFLNMn/3FqxlriuwE/zptJ3eKzF1t LyngkOsdYSA91p8iVoe3EHuLGGn42qvqgehgroumXqAHiU22sQnxNAJqL1VzfQVZ ODbhVQxsrM2OlA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:36 2025 by rpki-client